Your message dated Sun, 31 Aug 2014 18:18:59 +0000
with message-id <[email protected]>
and subject line Bug#753727: fixed in libsepol 2.3-2
has caused the Debian Bug report #753727,
regarding Please don't run "telinit u" under systemd
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
753727: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=753727
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: libsepol1
Version: 2.3-1
Severity: important
Tags: patch
The current version of libselinux1.postint runs "telinit u" to tell init
to re-exec itself. This was added so the system can shutdown cleanly
when sysvinit is the active PID 1.
Under systemd this is not necessary since systemd uses a dedicated
systemd-shutdown [1] tool which replaces init on shutdown. This ensures
all file systems can be unmounted cleanly.
Running "telinit u" midway through a dist-upgrade can have unwanted side
effects as the systemd package might be in an inconsistent state. As
you can see at [2], apt decided to remove libaudit0 (which is a
dependency of systemd in wheezy) and replace it with libaudit1. The new
systemd package is not yet unpacked. Running "telinit u" in such a state
will then lead to kernel panic.
Therefore please consider applying the attached patch in your next
upload.
Cheers,
Michael
[1] http://www.freedesktop.org/software/systemd/man/systemd-halt.service.html
[2] http://people.debian.org/~biebl/Debian-2014-07-04T13-18-40-656412000Z.webm
-- System Information:
Debian Release: jessie/sid
APT prefers unstable
APT policy: (500, 'unstable'), (200, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386
Kernel: Linux 3.14-1-amd64 (SMP w/4 CPU cores)
Locale: LANG=de_DE.utf8, LC_CTYPE=de_DE.utf8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Versions of packages libsepol1:amd64 depends on:
ii libc6 2.19-4
ii multiarch-support 2.19-4
libsepol1:amd64 recommends no packages.
libsepol1:amd64 suggests no packages.
-- no debconf information
diff --git a/debian/libsepol1.postinst b/debian/libsepol1.postinst
index ad87276..6ad2da1 100644
--- a/debian/libsepol1.postinst
+++ b/debian/libsepol1.postinst
@@ -4,8 +4,12 @@ set -e
if [ "$1" = "configure" ]; then
# Restart init. If it fails, there is nothing we can do, so
- # just ignore the error (NOTE: Borrowed from libc6.postinst)
- telinit u 2>/dev/null || true ; sleep 1
+ # just ignore the error (NOTE: Borrowed from libc6.postinst).
+ # Skip if systemd is the active PID 1, since systemd doesn't
+ # need a reexec for a clean shutdown
+ if ! [ -d /run/systemd/system ]; then
+ telinit u 2>/dev/null || true ; sleep 1
+ fi
fi
#DEBHELPER#
--- End Message ---
--- Begin Message ---
Source: libsepol
Source-Version: 2.3-2
We believe that the bug you reported is fixed in the latest version of
libsepol, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Laurent Bigonville <[email protected]> (supplier of updated libsepol package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Sun, 31 Aug 2014 20:02:14 +0200
Source: libsepol
Binary: sepol-utils libsepol1 libsepol1-dev
Architecture: source amd64
Version: 2.3-2
Distribution: unstable
Urgency: medium
Maintainer: Debian SELinux maintainers <[email protected]>
Changed-By: Laurent Bigonville <[email protected]>
Description:
libsepol1 - SELinux library for manipulating binary security policies
libsepol1-dev - SELinux binary policy manipulation library and development
files
sepol-utils - Security Enhanced Linux policy utility programs
Closes: 753727
Changes:
libsepol (2.3-2) unstable; urgency=medium
.
* Drop debian/libsepol1.postinst: Reloading systemd during an upgrade in an
uncontroled way might endup with unwanted side effects (Closes: #753727)
Checksums-Sha1:
36f4b4f931009c10d3da4e26740e45ce6dc05a3b 1762 libsepol_2.3-2.dsc
f73e722336ce12e50ada906d10cc97b4e9453d57 12904 libsepol_2.3-2.debian.tar.xz
959c12cd04876ac68751a0902f8df20dc00234d1 25456 sepol-utils_2.3-2_amd64.deb
773745d33b73221fc3d25c051c93eea3c65fb412 126888 libsepol1_2.3-2_amd64.deb
c31369f9c2be7f60347faafd7fb9904ab2ba01f5 165274 libsepol1-dev_2.3-2_amd64.deb
Checksums-Sha256:
115ab27d7662fc03e64d9e70ed20b5dcb2adb6206155ba2577072352a5b79b6a 1762
libsepol_2.3-2.dsc
4fea6f6de03cf6a8ba80579988ad56202d3652fe3153b0d2f8c65c89bba097a5 12904
libsepol_2.3-2.debian.tar.xz
98acb805bac8baefc11a44b3c78d6dd053c935a7616f9a1f3036a7fe3ad48ee2 25456
sepol-utils_2.3-2_amd64.deb
809665fb316152e1c862873abe1f4358302ab8bdab9b034bbe178f0e68257f56 126888
libsepol1_2.3-2_amd64.deb
271f10da685d082527738132ac8daf51842811ba2587e3674625962e9686de39 165274
libsepol1-dev_2.3-2_amd64.deb
Files:
f5c7d2fe7fb36f06129076e90c95ca9a 25456 admin optional
sepol-utils_2.3-2_amd64.deb
1b1663026aeeff73fbb1d65182707bc4 126888 libs required libsepol1_2.3-2_amd64.deb
888eae330fd9972b78ecc785ff9db7bb 165274 libdevel optional
libsepol1-dev_2.3-2_amd64.deb
556be8b465678563b8f732f5738c081d 1762 libs optional libsepol_2.3-2.dsc
aee06496d3c71479a6ae57c7f01988a1 12904 libs optional
libsepol_2.3-2.debian.tar.xz
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
iQEcBAEBCAAGBQJUA2RlAAoJEB/FiR66sEPVYhwH+wa+y7+RTeEV0gscD/8ZZ4Dc
jaUn/ayqnqudnwN1ONryM1qddbYzSf7F1vudHc95XuM2aOqW4PEmPU0wJiEblXEb
/N27EmxWO+mZJnePH7JiKBLSOUdCQ1gjIY1R7cGVkK9QZ8A0nJPfpOCLFTt3sZIV
AhBnG6C96ViLpN/krQbO9ajK26DHBrU+LREdsHjmIv7VYzph2iHn//WuS8OdxbmO
ziIS/ArRzaTkLk9ySoMctofTzMGv7k9Lrr8y3EA7Biui6EKGbx7vf22WDt19MCYB
0mAmIknXiwvi0PpS1YasD1IXTf5YxMLlec9DNc8En8dz6ogwmKKF4O0BbHbcCWY=
=7Bd5
-----END PGP SIGNATURE-----
--- End Message ---
_______________________________________________
SELinux-devel mailing list
[email protected]
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/selinux-devel
